TI-2022-07360 Aliases CVE-2022-23219 GHSA-fhxm-4mc9-6jf5

The deprecated compatibility function clnt_create in the sunrpc module of the GNU C…

HIGH 82CWE-120Published 2022-01-14 · Updated 2026-10-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Partial Red Hat: 3 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-120 and the CVSS impact.

Summary

The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.05034 92nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial Red Hat: 1 advisoryRed Hat: 3 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPE	Versions	Role	Vendor
cpe:2.3:a:gnu:glibc::::::::	before 2.31	Vulnerable	GNU
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:::::::*	22.1.3	Vulnerable	Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:::::::*	22.1.0	Vulnerable	Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:::::::*	22.1.2	Vulnerable	Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:::::::*	22.2.0	Vulnerable	Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:::::::*	22.1.1	Vulnerable	Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:::::::*	22.2.0	Vulnerable	Oracle
cpe:2.3:a:oracle:enterprise_operations_monitor:4.3:::::::*	4.3	Vulnerable	Oracle
cpe:2.3:a:oracle:enterprise_operations_monitor:4.4:::::::*	4.4	Vulnerable	Oracle
cpe:2.3:a:oracle:enterprise_operations_monitor:5.0:::::::*	5.0	Vulnerable	Oracle

cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* Versions before 2.31 Vulnerable ·GNU
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:* Versions 22.1.3 Vulnerable ·Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:* Versions 22.1.0 Vulnerable ·Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:* Versions 22.1.2 Vulnerable ·Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:* Versions 22.2.0 Vulnerable ·Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:* Versions 22.1.1 Vulnerable ·Oracle
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:* Versions 22.2.0 Vulnerable ·Oracle
cpe:2.3:a:oracle:enterprise_operations_monitor:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·Oracle
cpe:2.3:a:oracle:enterprise_operations_monitor:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Oracle
cpe:2.3:a:oracle:enterprise_operations_monitor:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Oracle

Show 1 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:debian:debian_linux:10.0:::::::*	10.0	Vulnerable	Debian

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian

Remediation

Red Hat 1 advisory

RHSA-2022:0896 Released 2022-03-15 · Red Hat rating Moderate
glibc security update
- Red Hat CodeReady Linux Builder (v. 8) glibc-benchtests-2.28-164.el8_5.3, glibc-nss-devel-2.28-164.el8_5.3, glibc-static-2.28-164.el8_5.3 +1
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-164.el8_5.3, glibc-utils-2.28-164.el8_5.3
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-164.el8_5.3, glibc-all-langpacks-2.28-164.el8_5.3, glibc-common-2.28-164.el8_5.3 +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 7	Affected	No fix planned: Out of support scope
Red Hat CodeReady Linux Builder (v. 8)	Fixed	RHSA-2022:0896
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2022:0896
Red Hat Enterprise Linux BaseOS (v. 8)	Fixed	RHSA-2022:0896

Not affected: 1 product

Red Hat Enterprise Linux 9

Timeline

2026-10-02 Threatist record created from CVE-2022-23219
2026-10-03 Alias added: GHSA-fhxm-4mc9-6jf5

References

Exploit 1

https://sourceware.org/bugzilla/show_bug.cgi?id=22542

Patch 1

https://www.oracle.com/security-alerts/cpujul2022.html

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences